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IN THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently Amended) A method to perform geolocation activities relating to a network 
address, the method including: 

maintaining a database of network addresses and associated geographic locations; 

receiving a query, including a network address, against the database for a geographic 
location associated with the network address; 

logging information concerning the query received against the database; and 

modifying geolocation activities relating to at least the network address based on the 
logged information, 

wherein the geolocation activities include: 

collecting network information pertaining to at least the network address; and 

estimating the geographic location associated with the network address, based on the 
collected network information, and 

wherein the modifying of the geolocation activities includes: 

prioritizing the geolocation activities relating to at least the network address . 

2. (Original) The method of claim 1, wherein the logging of information concerning the 
query includes logging the network address if a record identifying the geographic location 
associated with the network address is not located within the database. 



3. (Cancelled) 
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4. (Cancelled) 

5. (Currently Amended) The method of claim [[4]] I, wherein the collecting of the network 
information pertaining to at least the network address includes collecting the geolocation 
information utilizing a plurality of data collection agents. 

6. (Original) The method of claim 5, wherein the plurality of data collection agents are 
geographically dispersed. 

7. (Currently Amended) The method of claim [[4]] 1, wherein the collecting of the network 
information is performed utilizing a plurality of data collection processes. 

8. (Currently Amended) The method of claim [[4]] 1, wherein the collecting of the network 
information is performed from a plurality of data sources. 

9. (Cancelled) 

1 0. (Original) The method of claim 1 , including determining that the database does not 
indicate a geographic location as being associated with the network address, and wherein the 
modifying includes prioritizing the geolocation activities relating to the network address based 
on the determination that the database does not indicate the geographic location as being 
associated with the network address. 

1 1 . (Original) The method of claim 10, including maintaining a log of network addresses for 
which the database does not indicate respective geographic locations as being associated with the 
network addresses, and prioritizing the geolocation activities based on the log. 

12. (Original) The method of claim 1 1, wherein the log is a customer access log that indicates 
location misses, the method including obtaining information concerning location misses from the 
customer access log. 

13. (Original) The method of claim 1 1 , wherein the prioritizing of the geolocation activities 
is with respect to a plurality of network addresses included in the log. 
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14. (Original) The method of claim 10, including receiving the query from a requester, and 
communicating a message to the requester indicating an absence of an association between the 
network address and the geographic location in the database. 

15. (Original) The method of claim 1, wherein the query is received from a customer website, 
responsive to a user accessing the customer website, the network address being the network 
address associated with a machine of the user. 

16. (Original) The method of claim 1 , wherein the query is received via an Application 
Program Interface (API). 

17. (Original) The method of claim 1, wherein the query is received via a customer extranet. 

1 8. (Original) The method of claim 8, wherein the estimating includes determining whether 
the network address falls within a consolidated domain of network addresses maintained within 
the database. 

1 9. (Original) The method of claim 1 8, wherein the consolidated domain of network 
addresses maintained within the database includes any one of a group of domains including an 
educational, business, service provider and government domain. 

20. (Original) The method of claim 8, wherein the estimating includes identifying a network 
address block around the network address. 

21 . (Original) The method of claim 8, wherein the estimating includes running an exact 
geolocation process to determine geolocation information for the network address. 

22. (Original) The method of claim 20, wherein the estimating includes running an exact 
geolocation process to determine geolocation information for the identified network address 
block around the network address. 



23. (Original) The method of claim 21 , wherein the exact geolocation process includes any 
one of a group of geolocation processes including a traceroute, a latency calculation, a hostname 
matching operation and a DNS process. 
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24. (Original) The method of claim 8, wherein the estimating includes running an inexact 
geolocation process to determine geolocation information for the network address. 

25. (Original) The method of claim 8, wherein the estimating includes forwarding the 
network address for manual resolution. 

26. (Original) The method of claim 8, wherein the estimating is a tiered process, including a 
plurality of sequential automated mapping operations to associate the geographic location with 
the network address. 

27. (Currently Amended) A system to perform geolocation activities relating to a network 
address, the system including: 

a database of network addresses and associated geographic locations; and 

a server to: 

receive a query, including a network address, against the database for a 
geographic location associated with the network address; 

log information concerning the query received against the database; and 

modify geolocation activities relating to at least the network address based on the 
logged information, 

wherein the server is to perform geolocation activities including: 

collecting network information pertaining to at least the network address: and 

estimating the geographic location associated with the network address, based on the 
collected network information, and 

wherein the server is to modify the geolocation activities by: 

prioritizing the geolocation activities relating to at least the network address . 
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28. (Original) The system of claim 27, wherein the server is to log the network address if a 
record identifying the geographic location associated with the network address is not located 
within the database. 

29. (Cancelled) 

30. (Cancelled) 

3 1 . (Currently Amended) The system of claim [[30]] 27, including a plurality of data 
collection agents to collect the geolocation information. 

32. (Original) The system of claim 3 1 , wherein the plurality of data collection agents are 
geographically dispersed. 

33. (Currently Amended) The system of claim [[30]] 27, wherein the collecting of the 
network information is performed utilizing a plurality of data collection processes. 

34. (Currently Amended) The system of claim [[30]] 27, wherein the collecting of the 
network information is performed from a plurality of data sources. 

35 . (Cancelled) 

36. (Original) The system of claim 27, wherein the server is to determine that the database 
does not indicate the geographic location as being associated with the network address, and to 
prioritize the geolocation activities relating to the network address based on the determination 
that the database does not indicate the geographic location as being associated with the network 
address. 

37. (Original) The system of claim 36, including a log of network addresses for which the 
database does not indicate respective geographic locations as being associated with the network 
addresses, the server to prioritize the geolocation activities based on the log. 

38. (Original) The system of claim 37, wherein the log is a customer access log that indicates 
location misses, the server to obtain information concerning location misses from the customer 
access log. 
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39. (Original) The system of claim 37, wherein the server is to prioritize the geolocation 
activities with respect to a plurality of network addresses included in the log. 

40. (Original) The system of claim 27, wherein the server is to receive the query from a 
requester, and to communicate a message to the requester indicating an absence of an association 
between the network address and the geographic location in the database. 

41 . (Original) The system of claim 27, wherein the query is received at the server from a 
customer website, responsive to a user accessing the customer website, the network address 
being the network address associated with a machine of the user. 

42. (Original) The system of claim 27, wherein the query is received via an Application 
Program Interface (API). 

43. (Original) The system of claim 27, wherein the query is received via a customer extranet. 

44. (Original) The system of claim 27, wherein the server is to determine whether the 
network address is likely to fall within a consolidated domain of network addresses maintained 
within the database. 

45. (Original) The system of claim 44, wherein the consolidated domain of network 
addresses maintained within the database includes any one of a group of domains including an 
educational, business, service provider and government domain. 

46. (Original) The system of claim 27, wherein the server is to identify a network address 
block around the network address. 

47. (Currently Amended) The system of claim [[35]] 27, wherein the estimating includes 
running an exact geolocation process to determine geolocation information for the network 
address. 



48. (Currently Amended) The system of claim [[35]] 27, wherein the estimating includes 
running an exact geolocation process to determine geolocation information for the identified 
network address block around the network address. 
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49. (Original) The system of claim 48, wherein the exact geolocation process includes any 
one of a group of geolocation processes including a traceroute, a latency calculation, a hostname 
matching operation and a DNS process. 

50. (Currently Amended) The system of claim [[35]] 27, wherein the estimating includes 
running an inexact geolocation process to determine geolocation information for the network 
address. 

5 1 . (Currently Amended) The system of claim [[35]] 27, wherein the estimating includes 
forwarding the network address for manual resolution. 

52. (Currently Amended) The system of claim [[35]] 27, wherein the estimating is a tiered 
process, including a plurality of sequential automated mapping operations to associate the 
geographic location with the network address. 

53. (Currently Amended) A machine-readable medium storing a set of instructions that, when 
executed by a machine, cause the machine to perform a method to perform geolocation activities 
relating to a network address, the method including: 

maintaining a database of network addresses and associated geographic locations; 

receiving a query, including a network address, against the database for a geographic 
location associated with the network address; 

logging information concerning the query received against the database; and 

modifying geolocation activities relating to at least the network address based on the 
logged information^ 

wherein the geolocation activities include: 

collecting network information pertaining to at least the network address: and 

estimating the geographic location associated with the network address, based on the 
collected network information, and 

wherein the modifying of the geolocation activities includes: 
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prioritizing the geolocation activities relating to at least the network address . 



54. (Currently Amended) A system to perform geolocation activities relating to a network 
address, the system including: 

first means for storing network addresses and associated geographic locations; and 

second means for: 

receiving a query, including a network address, against the [database] first means, 
the query being for a geographic location associated with the network address; 

determining that the [database] first means does not indicate a geographic location 
as being associated with the network address; 

logging information concerning the query received against the [database] first 
means ; and 

modifying geolocation activities relating to at least the network address based on 
the logged information^ 

wherein the second means is for performing geolocation activities including: 

collecting network information pertaining to at least the network address: and 

estimating the geographic location associated with the network address, based on the 
collected network information, and 



wherein the second means is for modifying the geolocation activities by: 

prioritizing the geolocation activities relating to at least the network address . 



